Axis Q1656-LE

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:axis:q1656-le:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorAxis (70b79958-9d75-5ad6-90bd-d85cad17d4e7)
ProductQ1656 Le (f027f0aa-d2b9-5698-962b-8109e4b9e621)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8108 not_vulnerable 2026-06-08 07:45:19.592930 Details available
MEDIUM (6.7)
An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Published: 2025-11-11T07:10:31.421Z
Updated: 2026-02-26T16:58:01.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6779 not_vulnerable 2026-06-08 07:43:16.410215 Details available
MEDIUM (6.7)
An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Published: 2025-11-11T07:05:51.357Z
Updated: 2026-02-26T16:58:01.741Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5718 not_vulnerable 2026-06-08 07:37:25.535238 Details available
MEDIUM (6.8)
The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Published: 2025-11-11T06:52:33.565Z
Updated: 2026-02-26T17:46:56.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5454 not_vulnerable 2026-06-08 07:37:24.727270 Details available
MEDIUM (6.4)
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Published: 2025-11-11T06:50:19.130Z
Updated: 2026-02-26T17:46:56.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5452 not_vulnerable 2026-06-08 07:37:24.642605 Details available
MEDIUM (6.6)
A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the malicious ACAP application. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Published: 2025-11-11T07:00:46.077Z
Updated: 2026-02-26T16:58:02.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4645 not_vulnerable 2026-06-08 07:29:16.940754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-21414 not_vulnerable 2026-06-08 05:54:18.546689 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.